Can anyone give me some info on the W2k event log below. I'm having a hard time tracking down info about it. I know WHAT is is and why it happens, but I can't figure what's causing it. This is from our domain controller. We see things like it every now and then, but cannot track it.
Here's a few specific questions I have about it:
1. What exactly causes this event?
2. Is there a way to track such events?
3. Where did the "Caller Machine Name" come from? It is ±è¿µÀÏ
4. You can not see it here, but the font in this event was different from the rest. Is there a reason for that?

Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 644
Date: 7/13/2004
Time: 12:16:10 AM
User: NT AUTHORITY\SYSTEM
Computer: DCNAME
Description:
User Account Locked Out:
Target Account Name: Administrator
Target Account ID: CORP\Administrator
Caller Machine Name: ±è¿µÀÏ
Caller User Name: DCNAME$
Caller Domain: CORP
Caller Logon ID: (0x0,0x3E7)